‘Cloud Storage Full’ Scam Exploits Users to Steal Photos and Financial Data

NEW YORK — November 22, 2025 — A new phishing scam is targeting individuals by sending fraudulent “Cloud Storage Full” alerts, leading victims to fake websites designed to steal personal photos and credit card information, cybersecurity experts warned Friday.

The scam begins with users receiving messages—often via email or text—claiming their cloud storage is full and urging them to upgrade their accounts. These alerts appear legitimate and prompt recipients to click on links directing them to counterfeit websites that mimic popular cloud storage providers.

Once on the fake sites, users are asked to enter sensitive information, including credit card details, under the guise of purchasing additional storage space. According to authorities, this information is then harvested by criminals for fraudulent transactions. Additionally, the scam often results in the theft of personal photos stored on the victims’ devices or cloud accounts.

Cybersecurity officials have noted a rise in reports related to this scam over the past several weeks. “These fraudulent alerts are becoming increasingly sophisticated, making it difficult for users to distinguish between authentic and fake messages,” said a cybersecurity analyst familiar with the investigations.

Experts advise users to be cautious when receiving unsolicited messages about account statuses, especially those urging immediate action. Instead of clicking on embedded links, users should navigate directly to their cloud provider’s official website or app to verify account details.

To protect themselves, users are encouraged to enable two-factor authentication on their cloud storage accounts and regularly monitor bank statements for unauthorized charges. Avoiding public Wi-Fi when accessing sensitive accounts and keeping software up to date can also reduce vulnerability.

The scam underscores the growing trend of cybercriminals exploiting everyday technology services to gain access to personal and financial information. Authorities continue to investigate and urge the public to report suspicious messages to help mitigate the spread of such fraudulent activities.

As cloud storage becomes an integral part of digital life, users are reminded to remain vigilant and verify any alerts related to their accounts through official channels to avoid falling victim to these scams.